secure services and reverse proxy web rest issues

Question

We're having trouble logging into our reverse proxy address. If I connect to the internal address it works fine. I get the directories a particular user has permission to get to. If I use the machines reverse proxy external address and I type the login I just go back to the root and no directories have appeared and it's still got a login link up the top right (ie. it hasn't logged in). I've checked the web.configs in "rest", "Tokens" and "Services" and changed things like the TokenServiceURL. I'm not using SSL so my TokenServiceURL is something like: http:///ArcGIS/tokens/ I've gone into the rest.config and changed , and . If I go to the external admin login http:///ArcGIS/rest/Admin I get this modification to the url: http:///ArcGIS/rest/admin/login?redirect=http%3a%2f%2f%2farcgis%2frest%2fadmin note the internal address in the referer. Is that a hint of what is happening?

FengLin · Answer

Try to disable the "Verify Normalization" on Reverse Proxy Server (ISA 2006): On ISA web publishing rule, right click > config HTTP policy properties > uncheck "Verify Normalization" We're having trouble logging into our reverse proxy address. If I connect to the internal address it works fine. I get the directories a particular user has permission to get to. If I use the machines reverse proxy external address and I type the login I just go back to the root and no directories have appeared and it's still got a login link up the top right (ie. it hasn't logged in). I've checked the web.configs in "rest", "Tokens" and "Services" and changed things like the TokenServiceURL. I'm not using SSL so my TokenServiceURL is something like: http:///ArcGIS/tokens/ I've gone into the rest.config and changed , and . If I go to the external admin login http:///ArcGIS/rest/Admin I get this modification to the url: http:///ArcGIS/rest/admin/login?redirect=http%3a%2f%2f%2farcgis%2frest%2fadmin note the internal address in the referer. Is that a hint of what is happening?

TonyContreras · Answer

This can be a complicated situation, depending on the security model implemented. To start, visit the article and pick your Reverse Proxy option, then look over the section for REST and verify that has been configured properly.

Configure Reverse Proxy